This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/5OfkzwUGmYE4HGusKKJrtmmU0rc.cer File: 5OfkzwUGmYE4HGusKKJrtmmU0rc.cer (raw, json) Hash identifier: Bu7wfqYHBrQW8M8W4hIx/gNWSuKuajhuvy+7x4AWEPg= Subject key identifier: E4:E7:E4:CF:05:06:99:81:38:1C:6B:AC:28:A2:6B:B6:69:94:D2:B7 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3CD0 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/59C558DED0F511F0AE204785DAE4EC9C/5OfkzwUGmYE4HGusKKJrtmmU0rc.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/59C558DED0F511F0AE204785DAE4EC9C/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 03:38:09 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 24863 IP: 41.128.0.0/14 IP: 41.178.0.0/16 IP: 41.196.0.0/16 IP: 196.205.0.0/16 IP: 197.160.0.0/13 IP: 2c0e::/20 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15568 (0x3cd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 03:38:09 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36A6EA0AF, serialNumber=E4E7E4CF05069981381C6BAC28A26BB66994D2B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c1:f3:04:f2:cd:df:51:6c:a3:39:4e:bc:31: ae:aa:c8:22:b1:70:7e:68:74:69:f5:1c:19:33:d0: d0:e5:e4:53:53:d2:1e:98:02:f3:8c:1a:cf:69:36: 30:b6:f3:79:ac:79:93:d3:1c:d6:3f:68:e4:df:fe: 59:84:c2:b5:4b:e2:d4:6e:fb:2b:f6:dd:d8:db:7f: a1:2d:2c:61:14:9d:4b:6b:58:af:9d:5e:9f:6e:1d: be:b0:58:31:e7:10:77:a5:4e:d0:73:6d:c9:25:01: 3b:50:35:a2:35:75:92:ea:1b:ee:db:36:a5:7d:7c: e7:a5:21:c4:8a:2e:7a:03:90:f7:6a:8c:8a:2c:08: 9a:ae:bf:ed:2b:0a:e4:d6:00:06:d2:7c:80:ed:28: e4:72:6c:b4:50:70:0a:35:30:0f:60:b5:54:4c:db: b6:c3:9f:fe:9e:a0:c3:2d:85:ea:fb:b7:63:83:44: df:3e:e1:ec:a6:25:17:e4:a6:99:c1:ad:ad:1f:54: 0e:8b:e3:02:53:58:14:d4:f5:0a:7f:ed:44:05:13: 11:d4:10:9e:a8:8f:17:f0:f6:e7:0d:4a:55:ab:54: c4:c9:e2:92:45:d5:99:a6:60:50:57:11:12:ee:34: 01:a8:81:c4:d0:43:f5:4e:ff:0f:fe:74:15:4b:99: e4:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:E7:E4:CF:05:06:99:81:38:1C:6B:AC:28:A2:6B:B6:69:94:D2:B7 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/59C558DED0F511F0AE204785DAE4EC9C/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/59C558DED0F511F0AE204785DAE4EC9C/5OfkzwUGmYE4HGusKKJrtmmU0rc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 24863 sbgp-ipAddrBlock: critical IPv4: 41.128.0.0/14 41.178.0.0/16 41.196.0.0/16 196.205.0.0/16 197.160.0.0/13 IPv6: 2c0e::/20 Signature Algorithm: sha256WithRSAEncryption 11:b2:2b:0c:f1:b6:0d:3a:ea:52:9d:93:a4:f1:07:a7:0b:74: 87:97:db:49:6f:1f:8d:5b:ec:a5:0e:56:52:9c:08:d6:71:52: ce:fb:6c:d9:07:9c:34:17:60:c6:c9:12:85:f6:dc:f3:92:b1: 3a:ed:3c:55:f4:5a:51:30:2c:ee:13:88:d6:6c:31:3c:ee:d1: 21:75:87:e9:a5:45:b1:a0:c6:c8:db:fd:9b:0f:4c:2f:47:07: 46:f6:9b:ef:26:55:c0:81:25:26:52:2b:b6:c6:22:be:09:9a: 75:66:91:a6:a9:e2:6a:be:02:93:46:eb:16:5e:68:e6:ee:63: 1d:dc:93:b4:59:9a:ff:59:57:39:9e:70:f1:90:15:d3:0c:a2: a8:de:5b:a0:c8:96:b5:ae:f6:1d:43:71:7a:69:e8:17:dc:34: 3a:f7:25:5a:40:aa:17:ae:91:d0:13:f4:ce:f5:76:13:c6:d2: f0:8e:91:45:04:41:ef:98:17:7c:8f:16:3c:de:12:ac:82:4c: 19:51:7e:8d:19:db:c3:22:36:19:15:b3:82:d9:fd:64:8f:3d: 3e:33:59:af:79:b1:99:e5:58:16:d0:66:56:f7:d7:fb:be:95: 98:9d:2b:4c:8d:57:67:07:99:17:96:95:4b:1e:06:86:57:12: 97:96:2f:cf -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgICPNAwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMzM4MDlaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkE2RUEwQUYxMTAvBgNVBAUTKEU0RTdFNENGMDUwNjk5ODEzODFDNkJB QzI4QTI2QkI2Njk5NEQyQjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8wfME8s3fUWyjOU68Ma6qyCKxcH5odGn1HBkz0NDl5FNT0h6YAvOMGs9pNjC2 83mseZPTHNY/aOTf/lmEwrVL4tRu+yv23djbf6EtLGEUnUtrWK+dXp9uHb6wWDHn EHelTtBzbcklATtQNaI1dZLqG+7bNqV9fOelIcSKLnoDkPdqjIosCJquv+0rCuTW AAbSfIDtKORybLRQcAo1MA9gtVRM27bDn/6eoMMther7t2ODRN8+4eymJRfkppnB ra0fVA6L4wJTWBTU9Qp/7UQFExHUEJ6ojxfw9ucNSlWrVMTJ4pJF1ZmmYFBXERLu NAGogcTQQ/VO/w/+dBVLmeSXAgMBAAGjggMrMIIDJzAdBgNVHQ4EFgQU5OfkzwUG mYE4HGusKKJrtmmU0rcwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZBNkVBMC81OUM1NThERUQwRjUx MUYwQUUyMDQ3ODVEQUU0RUM5Qy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2QTZFQTAvNTlDNTU4REVEMEY1MTFGMEFFMjA0Nzg1REFFNEVDOUMvNU9ma3p3 VUdtWUU0SEd1c0tLSnJ0bW1VMHJjLm1mdDAZBggrBgEFBQcBCAEB/wQKMAigBjAE AgJhHzBABggrBgEFBQcBBwEB/wQxMC8wHwQCAAEwGQMDAimAAwMAKbIDAwApxAMD AMTNAwMDxaAwDAQCAAIwBgMEBCwOADANBgkqhkiG9w0BAQsFAAOCAQEAEbIrDPG2 DTrqUp2TpPEHpwt0h5fbSW8fjVvspQ5WUpwI1nFSzvts2QecNBdgxskShfbc85Kx Ou08VfRaUTAs7hOI1mwxPO7RIXWH6aVFsaDGyNv9mw9ML0cHRvab7yZVwIElJlIr tsYivgmadWaRpqniar4Ck0brFl5o5u5jHdyTtFma/1lXOZ5w8ZAV0wyiqN5boMiW ta72HUNxemnoF9w0OvclWkCqF66R0BP0zvV2E8bS8I6RRQRB75gXfI8WPN4SrIJM GVF+jRnbwyI2GRWzgtn9ZI89PjNZr3mxmeVYFtBmVvfX+76VmJ0rTI1XZweZF5aV Sx4GhlcSl5Yvzw== -----END CERTIFICATE-----Generated at Sun Jan 25 04:20:12 2026 by rpki-client